m0n0wall计划的目标是创建一份完整的、内置的防火墙软件包，当它配合PC使用时，能够提供商用防火墙机器的所有重要功能（连同易用性在内），而其 价钱却只是后者的一小部分（因为m0n0wall是自由软件）。m0n0wall基于FreeBSD的一个精简版本，并带有一个web服务器 （thttpd）、PHP以及其他一些实用工具。整套系统配置存储于单个的XML文本文件以对系统透明。m0n0wall很可能是首个拥有用PHP实现的 启动配置的UNIX系统，而通常这是依靠shell脚本的，此外，它把整个系统配置都用XML格式存储。
下载地址：http://www.packetscan.com/m0n0wall/cdrom-1.34.iso
该版本相关信息：
Known issues:
WARNING: this version (any platform) no longer fits on 8 MB CF cards! (>= 16 MB required)
When upgrading from generic-pc 1.2x, you must install 1.3b7 first before you install this image. Other platforms are not affected.
Changes in this release:
Backported from beta branch:
Eliminate modifying GETs from webGUI pages.
Note: the API pages exec_raw.php and uploadconfig.php now require different parameters than before. exec_raw.php now requires the cmd to be given in a POST, and both pages need a valid CSRF magic token, which can be obtained by issuing a GET first without any parameters (see example in exec_raw.php comment).
Make rule moving and deletion on shaper rules page work like for firewall rules.
Add csrf-magic for CSRF protection in webGUI.
Fix potential XSS in diag_ping.php and diag_traceroute.php.
Increase key size of auto-generated webGUI certificates to 2048 bits.
Update default webGUI certificate/key.
Remove domain name handling from dhclient-script and change ARP command not to use sed (not used/available in m0n0wall).
Change virtualHW version to 7 for VMWare image to avoid errors in ESX 4
来自:开源中国社区
